What’s Vulnerable › Vulnerabilities

CVE-2020-12890

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-10 · updated 2026-06-17

Description

Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative access to potentially manipulate the AMD Generic Encapsulated Software Architecture (AGESA) to execute arbitrary code undetected by the operating system.

Affected products

• Amd Generic Encapsulated Software Architecture: all versions

References

• https://www.amd.com/en/corporate/product-security
• https://www.amd.com/en/corporate/product-security

Get alerted when CVE-2020-12890 or the next vulnerability affects your stack